Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a5c5dd02-dbae-4dd6-8847-568b666c48f9/3c96ca57d6a5f10e8018d26d285ecf8908d66f84.roa
File: 3c96ca57d6a5f10e8018d26d285ecf8908d66f84.roa (raw, json)
Hash identifier: UESESmTzbZasWNx578pIBoNshTFOI8MvByjafPjebgs=
Subject key identifier: 43:02:E4:D1:7B:47:95:06:FA:00:14:F0:5B:B5:DE:E2:50:8B:E9:49
Certificate issuer: /CN=d49d1779d87f6d8672b75b0322239640861b2611
Certificate serial: 0BC110
Authority key identifier: 85:60:1B:70:90:D5:50:FB:46:81:98:C8:0F:7B:98:7E:38:79:88:28
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d49d1779d87f6d8672b75b0322239640861b2611.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a5c5dd02-dbae-4dd6-8847-568b666c48f9/3c96ca57d6a5f10e8018d26d285ecf8908d66f84.roa
Signing time: Wed 06 Sep 2023 18:59:19 +0000
ROA not before: Tue 05 Sep 2023 18:59:19 +0000
ROA not after: Sat 06 Sep 2025 18:59:19 +0000
asID: 265827
IP address blocks: 45.71.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 770320 (0xbc110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49d1779d87f6d8672b75b0322239640861b2611
Validity
Not Before: Sep 5 18:59:19 2023 GMT
Not After : Sep 6 18:59:19 2025 GMT
Subject: CN=3c96ca57d6a5f10e8018d26d285ecf8908d66f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8b:b5:75:05:4a:e5:b6:b8:6a:12:19:2c:9b:
31:0a:3a:b1:3f:6a:dd:5d:8f:c4:f6:ed:bc:2e:85:
31:32:90:68:10:27:33:2c:2c:c6:9f:bb:2c:a0:45:
b3:99:6e:b4:5f:37:23:4c:90:c2:5c:5a:3e:9b:22:
5e:86:66:2e:3e:08:06:de:47:f2:55:e9:8d:87:b4:
55:fc:6c:77:5b:b6:f3:62:30:36:19:6b:49:6c:6c:
fc:1c:7f:7a:65:8b:2e:b9:a2:96:cd:23:ef:0b:83:
1a:6b:2e:23:02:a5:4e:03:cb:07:30:90:d4:85:f1:
77:35:9f:75:25:18:37:de:4f:f1:44:52:dd:3c:d4:
71:5e:d0:45:75:39:a0:57:35:57:56:67:b9:e8:6f:
82:bb:9e:00:66:d9:bf:e8:60:99:f1:97:16:63:63:
6a:94:5a:83:ec:e5:ec:b5:2d:8b:db:d1:95:07:5f:
c1:6f:da:0b:7f:c3:37:fd:55:4c:de:0b:e6:bf:ed:
9a:81:fa:7d:82:5c:72:66:2f:5a:16:24:ba:ad:29:
37:d7:7a:e7:c9:6f:6b:0b:fe:24:7a:d7:f4:d1:7e:
fd:ad:2a:3b:9b:bd:46:a7:d6:aa:72:24:53:93:a5:
13:4d:9b:4f:68:56:e4:52:de:a5:1b:bd:94:07:1c:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:02:E4:D1:7B:47:95:06:FA:00:14:F0:5B:B5:DE:E2:50:8B:E9:49
X509v3 Authority Key Identifier:
keyid:85:60:1B:70:90:D5:50:FB:46:81:98:C8:0F:7B:98:7E:38:79:88:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d49d1779d87f6d8672b75b0322239640861b2611.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a5c5dd02-dbae-4dd6-8847-568b666c48f9/3c96ca57d6a5f10e8018d26d285ecf8908d66f84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a5c5dd02-dbae-4dd6-8847-568b666c48f9/d49d1779d87f6d8672b75b0322239640861b2611.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.16.0/22
Signature Algorithm: sha256WithRSAEncryption
10:74:c8:6a:3c:d1:7c:a9:b6:d2:bf:12:dd:38:c3:5d:49:6f:
7e:7d:e5:a2:12:e7:e8:c4:33:7a:5d:82:2b:1b:dc:bc:6a:cb:
15:e6:79:59:59:45:cf:3d:c7:d3:73:7c:2c:de:88:5d:a8:19:
c1:6b:10:0d:dc:aa:6b:f0:0e:2e:88:b9:d7:ba:ee:14:2c:20:
1d:d8:32:1c:00:aa:a8:b6:67:b9:f1:bb:f8:c2:c9:67:a0:91:
5b:21:ef:17:da:d4:1e:d9:32:bc:ff:e2:25:39:5c:df:ef:59:
3c:a1:a0:d7:4a:c5:28:dc:38:2e:30:ad:d4:4a:e0:a0:4f:4c:
f0:87:9c:46:71:67:3a:1a:49:e4:ea:33:b1:c0:e4:bc:1f:a5:
b1:83:b9:3d:40:f1:a2:d6:08:47:40:8e:e1:00:e7:f3:e9:d6:
ad:e5:fc:eb:ce:10:a7:78:9f:ce:3a:f9:f4:27:2a:ac:1d:37:
87:a7:87:16:02:89:cb:2f:c2:61:64:23:70:0e:b6:5c:82:f5:
1f:4d:2f:1f:86:b2:f0:a0:90:00:72:8f:18:a2:63:98:f8:1f:
61:23:d4:9c:0b:6a:ee:be:13:1a:40:fe:1f:78:06:12:14:00:
91:ad:92:fb:79:d7:9c:2e:07:cc:fc:75:98:12:1d:df:84:f1:
cd:ae:15:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org